{"uuid": "4c4260cc-c65c-4d8f-a725-bdbbccc61b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt7ftqjdzx25", "content": "Phoca Cart, a Joomla store extension, has a critical flaw (CVE-2026-74251) that lets anyone read the shop's whole database, no login needed.\n\nCustomer records and password hashes are exposed on the public shop page.\n\nAffects 5.0.0 to 6.1.6. Fixed in 6.1.7. Update now.", "creation_timestamp": "2026-08-16T14:34:28.744209Z"}